Legal · All in Touch Ltd
Privacy Policy
Contents
Section 1
Who we are
KinBridge is operated by All in Touch Limited, a company registered in England and Wales.
Registered address:
All in Touch Limited
Windsor Court, 11 Tilehurst Road
Reading, RG1 7RA, England
All in Touch Limited is the data controller for the personal data processed through the KinBridge platform. Our data processor for application hosting and database services is Supabase Inc., who hold and process data on our behalf under a data processing agreement.
For all data protection enquiries, contact us at: theteam@all-in-touch.com
Section 2
What data we collect
We collect only the data necessary to provide the KinBridge service. The table below sets out exactly what we collect and why.
| Data type | What it is | Why collected |
|---|---|---|
| Name | Your display name within KinBridge. Pseudonyms are permitted. | Identifying you within your care circle |
| Email address | Used for authentication, circle invitations, and service notifications | Account creation, login, and transactional emails |
| User ID | A randomly generated identifier assigned to your account | Linking your data securely within Supabase |
| Care circle content | Updates, feed posts, tasks, and calendar events you create | Delivering the core coordination service |
| Role assignment | Your role within a circle (Family Admin, Family, or Carer) | Controlling what content you can access |
What we do not collect
- Location data — the app never requests your location
- Phone number
- Clinical or medical records — any care notes are optional, user-authored, and not structured medical data
- Financial account details — subscription payments are handled entirely by our payment provider (Stripe); we never see your card number
- Device contacts
- Photos or videos — the app does not currently request camera or media access
- Crash or diagnostic data — we do not use third-party analytics or crash-reporting SDKs
Section 3
How we use your data
We use your data only for the following purposes:
- Providing the service — running your care circle, enabling updates, tasks, calendar events, and messaging between circle members
- Account management — creating and maintaining your account, processing invitations, managing roles
- Service communications — sending transactional emails such as invitation emails, password resets, and account notifications (via Resend, our email delivery provider)
- Security and fraud prevention — protecting accounts from unauthorised access
We do not use your data for advertising, behavioural profiling, or any purpose unrelated to providing and maintaining the KinBridge service.
Section 4
Legal basis for processing
Under UK GDPR, we rely on the following legal bases:
- Contract — processing your name, email, and account data is necessary to provide the service you have subscribed to
- Legitimate interests — we have a legitimate interest in maintaining the security of the platform and sending essential service notifications
- Consent — for any optional data you choose to enter, such as care notes or recipient details, you provide this voluntarily
Section 5
Who we share data with
We do not sell your data. We do not share your data with third parties for advertising purposes. We share data only with the following service providers who act as our data processors:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase Inc. | Database hosting, authentication, file storage | All account and circle data |
| Resend | Transactional email delivery | Email address, notification content |
| Stripe | Subscription payment processing | Payment details only — we never see card numbers |
| Expo / EAS | Mobile app build and delivery infrastructure | App binary only — no user data |
We may also disclose data to legal authorities where required by law — for example, in response to a valid court order or to prevent fraud.
Section 6
How long we keep data
We retain your personal data for as long as your account is active and for a short period afterwards to handle any queries or disputes arising from your use of the service.
- Account data — retained while your account is active, then deleted within 30 days of a verified deletion request
- Circle content (updates, tasks, feed posts) — deleted alongside your account on request, or when the circle is closed by the Family Admin
- Transactional email logs — retained by Resend for up to 30 days as delivery records
- Payment records — retained by Stripe in accordance with their data retention policy and applicable financial regulations
Section 7
How we protect your data
- Encryption in transit — all data between the app and our servers travels over HTTPS/TLS
- Encryption at rest — Supabase encrypts stored data at rest
- Role-based access control — circle members can only access data their role permits; no public access to any data
- Invite-only access — circles are closed. No one can join without an explicit invitation from a Family Admin
- Circle isolation — each care circle is completely separated from every other circle at the database level (row-level security)
- No advertising SDK — we use no advertising, analytics, or third-party tracking SDKs in the mobile app
Section 8
Your rights
Under UK GDPR, you have the following rights regarding your personal data. You can exercise any of them by contacting us at theteam@all-in-touch.com.
Right of access
Request a copy of the personal data we hold about you.
Right to rectification
Ask us to correct inaccurate or incomplete data.
Right to erasure
Request deletion of your personal data. We will action this within 30 days.
Right to restrict processing
Ask us to pause processing of your data in certain circumstances.
Right to portability
Receive your data in a machine-readable format.
Right to object
Object to processing based on legitimate interests.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
Section 9
Requesting deletion of your account and data
You can request deletion of your KinBridge account and all associated personal data at any time — including after uninstalling the app.
To submit a deletion request, visit our dedicated deletion page:
Alternatively, email theteam@all-in-touch.com with the subject line "Data Deletion Request" and the email address associated with your account. We will confirm receipt and complete deletion within 30 days.
Please note: if you are a member of a care circle, deletion of your account removes your membership and your contributions to that circle. It does not delete other members' data or the circle itself.
Section 10
Children and minimum age
KinBridge is intended for adults. You must be at least 16 years old to create an account. If you are between 16 and 17, you should have the permission of a parent or legal guardian.
We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected data from a child under 16, please contact us at theteam@all-in-touch.com and we will delete it promptly.
Section 11
Cookies
The KinBridge mobile app does not use cookies.
The KinBridge website (kinbridge.uk) may use essential cookies to maintain your session and basic functionality. We do not use advertising, tracking, or third-party analytics cookies. If we introduce any non-essential cookies in future, we will update this policy and seek your consent before setting them.
Section 12
Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (using the address associated with your account) and update the "Last updated" date at the top of this page.
Continued use of KinBridge after notification of a change constitutes your acceptance of the updated policy.
Section 13
Contact us
For any questions about this Privacy Policy or how we handle your data:
- Email: theteam@all-in-touch.com
- Post: All in Touch Limited, Windsor Court, 11 Tilehurst Road, Reading, RG1 7RA
Questions about your data?
We're happy to answer any questions about how KinBridge handles your information.
Email theteam@all-in-touch.com